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Appl.No. 10/634,881 

Reply to Office Action of: December 12, 2006 
Amendments to the Claims 

This listing of claims will replace all prior versions and listings of claims in the application: 
Listing of claims: 

1 . (currently amended) A method of distributing certificates to a plurality of mobile devices by 
es tablishing a mobile ad hock network ( MANET) between a p l urality of mobile devices at a 
pr ede termin e d time and d is tributing a certificate through s aid mobile ad hoc network to a 
r es p e ctive one of - said mobile devices, capable of communicating directly with each other 
comprisin g: 

- attempting to establish a mobile ad hoc network fMANET) between said plurality of mobile 
devices at periodic predetermined times: and 

- if said MANET can be established such that at least ojae of said plurality of mobile devices in 
said MANET is cap able of obtaining certificates, distributing a certificate through said MANET 
to_one or more of sai d plurality of mobile devices. 

2. (currently amended) The method of claim 1 wherein the times a time period for which [[a]] 
said certificate is valid is correlated to [[the]] said periodic predetermined times for estab lis h i ng 
s aid MANET . 

3. (currently amended) The method of claim 1 wherein if [[a]] one of said plurality of mobile 
devices [[that]] is unable to retrieve [[its]] a corresponding certificate within a preset time after 
the e stablishment of a said MANET is established, said one of said plurality of mobile devices 
subsequently attempts to participate in another ad-hoc networks network prior to [[the]] a next 
predetermined time to retrieve [[its]] said correspondin g certificate. 


4. (currently amended) The method of claim 1 wherein if [[a]] one of said plurality of mobile 
devices [[that]] is unable to retrieve [[its]] a corresponding certificate within an amount of a 
Eresent time after [[the]] sai^ MANET est ab lish m e nt is established, said one of said plurality of 
mobile deyices initiates a cellular packet data call to fetch it s obtain said corresponding 
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certificate. 

5. (currently amended) The method of claim 1 wherein an entity tracks which of said plurality of 
mobile devices have received currently valid certificates. 

6. (currently amended) The method of claim 5 wherein [[a]] corresponding certificates of [[a]] 
said plurality of mobile devices which [[has]] have not received an up-to-date certificate [[is]] 
are distributed to another one of said plurality of mobile devices that communicates with said 
entity. 

7. (currently amended) The method of claim 1 wherein [[the]] said predetermined times fe* 
est ablishing the MANET is are determined dynamically based upon measurements of times at 
which said plurality of mobile devices encounter each other. 

8. (currently amended) The method of claim 1 wherein the informati on i n said di s tributed 
certificate comprises a subset of [[the]] M certificate information and [[the]] said subset 
includes changed timing information and a signature. 

9. (currently amended) A method of distributing certificates in a mobile ad-hoc network 
(MANETV said MANET having an access point to - provid e a connection for connecting to a 
communication network and comprising a plurality of mobile devices to be connected to said 
communication network through said access point, said method comprising the steps of 
^retrieving and storing at said access points a plurality of certificates associated with respective 
ones of said plurality of mobile devices; 

- storing said plurality of certificates at said access point; and 

- upon establishinR sai dJMANET. forwarding said certificates through said mobile ad hoc 
network MANET to said respective ones of said plurality of mobile devices. 

10. (currently amended) The method of claim 9 wherein said access point queries those of said 
glmality of mobile devices with which it can exchange packets to determine [[their]] 
embedded root key. 
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11. (currently amended) The method of claim 10 wherein the access point fetch es obtains said 
plurality of certificates based upon said embedded root [[keys]] key. 

12. (currently amended) A method of distributing certificates within a mobile ad-hoc network 
(MANET) of a plurality of mobile devices comprising wherein having an online entity 
associated with a d e vice is at least one of said plurality of mobile devices be responsible for both 
distributing th e devic e ' s g certificate of said at least one of said plurality of mobile devices within 
said MANET and for fetehmg obtaining other certificates needed to allow validation by a noth e r 
devic e corresponding others of said plurality of mobile devices in said n e twor k MANET . 

13. (currently amended) The method of claim 12 wherein said at least one of said plurality of 
devices is responsible for collecting embedded root keys of sajd other s of said plurality of 
devices with which it come s- i n upon coming into contact there with. 

14. (original) The method of claim 13 wherein said root keys are reported to the online entity. 

15. (currently amended) The method of claim 14 wherein said online entity returns other 
certificates to [[the]] said at least one of said plurality of devices based upon [[the]] reported root 
keys. 

16. (currently amended) A method of securely setting a time source in a first mobile device &e»* 
capable of communicating with a second mobile device , said method comprising said first 
mobile device the steps of : 

^establishing a shared secret b e tw e en the two devices with said second device using certificates; 
^storing [[the]] said shared secret in a non-volatile memory; 

z JL first of said devices authenticating [[a]] said second of said d e vie es devicg using [[the]] sa^ 
shared secret, and 

■ obtaining tran s f e rring the a time from [[the]] said second device to the first device enable said 
time source to be set . 
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17. (currently amended) The method of claim 16 wherein [[the]] said shared secret is destroyed 
after an expiration time. 

18. (currently amended) The method of claim 16 wherein [[the]] said first device subsequently 
sets [[its]] a clock via a secure time source when it sub se quently c an upon establishing a 
connection thereto. 

19. (cuiTently amended) A method of a first mobile device validating a second mobile device. 
wherein said first and second mobil e devices are ca pable of communicating with each other, said 
mgjhod comprising: 

- said first mobile device obtaining wherein a certificate pr e sent e d tog fir s t - dovic e by a from said 
second device; 

- _said first mobile device determining if said certificate has expired; 

■ if said ce rtificate has not expired, said first mobile device using said certificate to validate said 
second mobile device: and is used for the validation if the^^nH H g virVn rm-tifir^r. frnn V nt 

CALF IIX rtS 

- if said certificate has e xpired, said first mobile device obtaining another certificate for said 
second mobile device using a pointer provided bv said second mobile device and validating said 
second m obile device using said another certificate, a nd wherein the fist dc.\ncc ii n cn f nr thn 
vacation a certificate fetched based upon a pointer pres e nted by the second device if the s eeead 
device's c e itificate has e - xpircd 

20. (currently amended) A method of distributing certificates whefeia when a first mobile device 
eanfiet i.s_unable to retrieve a certificate at a first time bee au s e there i3 no due to a lack of 
connectivity to the internet a network, s aid method comprising the gtcps of : 

: if said certificate has not been obtaine d bv a second time, said first mobile device requesting 
assistance of other devices tf-*he-ee rtificato has still not been r e ceived by a gecond time ; 
^having a second device ef-tfce from said other devices which has connectivity to said network 
request [[the]] said certificate on behalf of [[the]] said first device when the second device ha3 
connectivity to the internet ; 

-upon obtaining $aid certificate^ having the said second device reestablishing communication 
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with [[the]] said first device; and 

- said second device sending [[the]] said certificate from th e s econd devic e to [[the]] said first 
device. 
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